Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cVEYVh8pqVkbuBfR2mckaYGZFRQ.roa
File: cVEYVh8pqVkbuBfR2mckaYGZFRQ.roa (raw, json)
Hash identifier: FP6TGRHZJ0sY3cwd4PQhWm0dEol9JSGTN3UiDbbX9zo=
Subject key identifier: 71:51:18:56:1F:29:A9:59:1B:B8:17:D1:DA:67:24:69:81:99:15:14
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019873C385B49D22CE722CC72D3F96D7C0DE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cVEYVh8pqVkbuBfR2mckaYGZFRQ.roa
Signing time: Mon 04 Aug 2025 06:27:30 +0000
ROA not before: Mon 04 Aug 2025 06:27:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 217.60.12.0/22 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Aug 2025 13:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:c3:85:b4:9d:22:ce:72:2c:c7:2d:3f:96:d7:c0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 4 06:27:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=715118561f29a9591bb817d1da67246981991514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:05:cc:18:a2:3e:47:0d:bb:e0:9b:f2:c7:
a3:b0:ce:19:6f:a7:14:62:7c:11:09:ba:7f:46:4d:
0c:6f:17:b8:2f:59:b8:c6:0c:64:c1:03:28:c2:da:
d2:6d:0a:83:eb:8b:fc:f3:d2:7e:91:da:ea:2c:d7:
02:8a:1c:0a:7f:11:56:28:b7:27:9c:74:f1:74:13:
b1:58:40:5b:ed:cc:6d:0b:8e:64:cc:b9:99:75:d2:
ae:b1:7b:07:89:ca:c9:05:42:83:35:ca:d0:ec:df:
c7:dc:c3:d4:f6:a0:5a:73:bb:bc:8b:77:42:10:59:
de:6e:7d:41:41:3e:83:fb:9f:01:9a:eb:85:bd:49:
9f:bf:d6:cd:92:cd:2d:f6:b4:95:3f:8c:1a:34:55:
b5:8a:8d:e3:0d:d6:2b:cd:e0:38:ff:e2:df:54:3b:
c4:bb:b8:fa:74:a5:ce:7e:f7:ed:34:99:c9:35:ac:
2f:56:da:97:d7:19:11:15:54:af:e1:4b:0b:6f:dd:
24:f0:27:bd:6d:8e:83:d9:d0:7a:68:21:14:80:82:
16:7e:ba:4d:2f:a9:55:9c:03:f4:b3:02:cf:d7:0a:
fc:c7:d1:6f:06:80:ff:cb:d0:23:91:5d:3a:03:3c:
d7:6e:91:05:c7:ab:68:bf:32:2b:db:87:a3:c2:db:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:51:18:56:1F:29:A9:59:1B:B8:17:D1:DA:67:24:69:81:99:15:14
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cVEYVh8pqVkbuBfR2mckaYGZFRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.12.0/22
217.60.24.0/22
217.60.60.0/22
217.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:a8:c1:e3:10:b7:2d:41:54:68:8b:42:c1:4d:e8:83:0b:c9:
f1:90:c0:30:a1:9d:d1:7a:ad:79:f7:0e:60:29:2e:24:92:10:
bd:86:00:61:06:35:5f:14:53:a0:ab:fa:68:6e:4a:54:86:e0:
f4:25:78:dd:01:8f:1a:b9:72:a4:45:6b:78:75:77:ea:23:5c:
67:9d:e7:10:cd:63:ae:d3:1f:bf:60:c7:5b:4f:ae:82:80:4b:
31:8e:45:8d:3a:20:0c:b2:9b:22:cc:9d:54:a3:aa:48:fa:03:
88:20:54:1b:10:8a:e7:86:5f:4c:37:94:b6:9d:af:5e:24:7f:
68:18:28:86:e5:b6:45:41:97:0e:17:f8:71:15:15:a5:b0:8c:
89:46:54:37:40:f4:c3:0d:df:ff:dc:30:3e:f9:68:bf:50:f3:
81:f7:67:c6:6b:95:de:2c:40:53:c0:68:1b:e5:a5:96:1c:68:
cb:f4:62:0a:bb:d6:c1:5d:32:09:39:ec:d1:69:d4:67:02:95:
e0:4e:02:32:1e:85:6f:d5:41:6e:ab:c5:36:bf:93:e8:44:53:
f6:da:18:44:f8:46:da:ae:45:4d:bf:b9:c7:05:ce:c5:16:d1:
41:8c:c6:7c:e3:01:53:ac:b8:0c:d7:e4:82:9f:c8:df:70:53:
08:0a:ec:96
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZhzw4W0nSLOcizHLT+W18DeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwODA0MDYyNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTUxMTg1NjFmMjlhOTU5MWJiODE3ZDFkYTY3MjQ2OTgxOTkxNTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5MFzBiiPkcNu+Cb8sejsM4Zb6cU
YnwRCbp/Rk0Mbxe4L1m4xgxkwQMowtrSbQqD64v889J+kdrqLNcCihwKfxFWKLcn
nHTxdBOxWEBb7cxtC45kzLmZddKusXsHicrJBUKDNcrQ7N/H3MPU9qBac7u8i3dC
EFnebn1BQT6D+58BmuuFvUmfv9bNks0t9rSVP4waNFW1io3jDdYrzeA4/+LfVDvE
u7j6dKXOfvftNJnJNawvVtqX1xkRFVSv4UsLb90k8Ce9bY6D2dB6aCEUgIIWfrpN
L6lVnAP0swLP1wr8x9FvBoD/y9AjkV06AzzXbpEFx6tovzIr24ejwtsaXQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHFRGFYfKalZG7gX0dpnJGmBmRUUMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvY1ZFWVZoOHBxVmtidUJmUjJtY2thWUdaRlJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQC2TwMAwQC
2TwYAwQC2Tw8AwQC2TzAMA0GCSqGSIb3DQEBCwUAA4IBAQBPqMHjELctQVRoi0LB
TeiDC8nxkMAwoZ3Req159w5gKS4kkhC9hgBhBjVfFFOgq/pobkpUhuD0JXjdAY8a
uXKkRWt4dXfqI1xnnecQzWOu0x+/YMdbT66CgEsxjkWNOiAMspsizJ1Uo6pI+gOI
IFQbEIrnhl9MN5S2na9eJH9oGCiG5bZFQZcOF/hxFRWlsIyJRlQ3QPTDDd//3DA+
+Wi/UPOB92fGa5XeLEBTwGgb5aWWHGjL9GIKu9bBXTIJOezRadRnApXgTgIyHoVv
1UFuq8U2v5PoRFP22hhE+EbarkVNv7nHBc7FFtFBjMZ84wFTrLgM1+SCn8jfcFMI
CuyW
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:29:50 2025 by rpki-client